Lab #4 – Assessment Worksheet
Using Group Policy Objects and Microsoft Baseline Security Analyzer for Change Control
Course Name and Number: _____CIST 20700_________________________________________
Student Name: ____________Karen Dudley ________________________________________
Overview
There are many tools and suites designed to aid the security practitioner and the organization in implementing and managing change management. In this lab, you explored two such tools for the Windows platform: Group Policy Objects (built into the Windows operating systems) and the Microsoft Security Baseline Analyzer (provided free of charge). You used Group Policy Objects to strengthen the organization’s password policy by adding complexity and minimum password length requirements. You scanned the Windows server with the Microsoft Baseline Security Analyzer (MBSA) to assess its security state, and you examined the results of the Microsoft Baseline Security Analyzer in detail.
Lab Assessment Questions & Answers 1. Name six (6) policies you could enable in a Windows Domain.
Enforce password history
Maximum password age
Minimum password age
Minimum password length
Store password using reversible encryption
Password must meet complexity requirements

2. What is the minimum password length enforced by the “Password must meet complexity requirements” policy?
8 characters

3. What sources could you use as a source to perform the MBSA security scan?
Computer by Name or IP and multiple Computers by Domain or IP Range

4. What are some of the options that you can exercise when initiating the MBSA scan?
You can check for Windows administrative vulnerabilities and for security updates.
You can check a single computer or scan multiple computers at the same time.

5. Screen shots: Attach the screen shots requested in the lab activity below. Screen shots